quietly....

Thu Feb 3 16:40:52 UTC 2011

On Thu, 3 Feb 2011, Iljitsch van Beijnum wrote:

> On 3 feb 2011, at 17:16, Jon Lewis wrote:
>
>> When someone breaks or shuts off that filter, traffic through the NAPT firewall stops working.  On the stateful firewall with public IPs on both sides, everything works...including the traffic you didn't want.
>
>> People are going to want NAT66...and not providing it may slow down IPv6 adoption.
>
> Hm, if you turn off the NAT66 function, wouldn't the traffic pass through unhindered, too?

Outbound traffic would.  Inbound, if on the inside, you're using IPv6 
space that's not globally routed, won't.  Just like what happens now with 
NAPT with rfc1918 space on the inside when you stop doing 
translation...private IP traffic leaks out...but nothing comes back 
because there is no return path.

----------------------------------------------------------------------
  Jon Lewis, MCP :)           |  I route
  Senior Network Engineer     |  therefore you are
  Atlantic Net                |
_________ http://www.lewis.org/~jlewis/pgp for PGP public key_________